Press Release:

HP Simplifies Installation of Server Security with Two New Tools

SAN FRANCISCO, RSA Conference, April 14, 2003

HP (NYSE:HPQ) today introduced two new security installation tools designed to enhance and simplify the locking down of UNIX® host servers. Using HP-UX Bastille v2.0 for the HP-UX 11i operating system and the new Install-Time Security tool, customers can perform many security operations by simply selecting their preferred degree of lockdown security at the time of system installation.

HP also announced the HP-UX 11i operating system has received Common Criteria Certification EAL4-CAPP,(1) an international security standard providing increased protection for procurement of systems and networks that play an integral role in the United States' critical information infrastructure.

"Locking down UNIX host servers used to be a technically and administratively time-consuming process," said Mike Wardley, world wide marketing manager for HP-UX, HP Business Critical Systems. "HP-UX Bastille eases the administration requirements and helps deliver improved efficiencies and cost savings."

HP-UX Bastille v2.0 guides customers in securing servers running HP-UX 11i. Using the tool, customers answer a series of security, usability and functionality questions designed to provide the appropriate degree of security based on system usage. HP-UX Bastille v2.0 eases the administration of lockdown required of servers used for Web, applications and databases.

Install-Time Security software further simplifies for customers the process of first-time server security installation. It improves out-of-the-box system security by allowing customers to choose the degree of lockdown security during installation from pre-set security settings, which are then configured by HP-UX Bastille v2.0 to fit into their system.

Install-Time Security configures many security settings without the time-consuming process of answering security questions and automatically pulls in additional security software. The new functionality enables local or remote first-time-server installations to be more secure and suitable for deployment in semi-trusted networks.

The HP-UX Bastille software and other security feature software are available for free at http://www.software.hp.com, under "Internet and Security Solutions."

HP-UX 11i Receives Common Criteria Certification

HP recently established a milestone security certification for the HP-UX 11i operating system when it received the Common Criteria Certification EAL4-CAPP.

Responding to the need for heightened security in protecting the systems and networks that play an important role in the United States' critical information infrastructure, the National Institute of Standards and Technology (NIST) and the National Security Association (NSA) announced a collaborative effort to produce comprehensive security requirements and specifications for key technologies that will be used to build more secure systems for federal agencies.

In the United States, the government acquisition policy mandates that all commercial products are limited to those which have been evaluated by Common Criteria, NSA or NIST.

The primary focus of this high-priority project is to provide protection profiles in key technology areas, such as operating systems, firewalls, smart cards, biometrics devices, database systems, public key infrastructure components, network devices, virtual private networks, intrusion detection systems and Web browsers.

The certificate attests to the strong security functionality of HP-UX 11i. Specifically, HP-UX 11i (11.11) with specific patches has met the Common Criteria Part 3 conformant requirements of Evaluation Assurance Level 4 when running on single HP 9000 platforms or connected to other HP 9000 servers to form a local distributed system.

About HP

HP is a leading global provider of products, technologies, solutions and services to consumers and businesses. The company's offerings span IT infrastructure, personal computing and access devices, global services and imaging and printing. HP completed its acquisition of Compaq Computer Corporation on May 3, 2002. More information about HP is available at http://www.hp.com.


(1)HP-UX 11i (11.11) Common Criteria Certification EAL4-CAPP was granted February 2003.

HP-UX Release 10.20 and later and HP-UX Release 11.00 and later (in both 32? and 64-bit configurations) on all HP 9000 computers are Open Group UNIX 95 branded products. UNIX is a registered trademark of the Open Group.


This news release contains forward-looking statements that involve risks, uncertainties and assumptions. All statements other than statements of historical fact are statements that could be deemed forward-looking statements. Risks, uncertainties and assumptions include the possibility that the market for the sale of certain products and services may not develop as expected; that development and performance of these products and services may not proceed as planned; and other risks that are described from time to time in HP's Securities and Exchange Commission reports, including but not limited to HP's quarterly report on Form 10-Q for the quarter ended January 31, 2003, and subsequently filed reports. If any of these risks or uncertainties materializes or any of these assumptions proves incorrect, HP's results could differ materially from HP's expectations in these statements. HP assumes no obligation to update these forward-looking statements.

About HP

HP Inc. creates technology that makes life better for everyone, everywhere. Through our portfolio of printers, PCs, mobile devices, solutions, and services, we engineer experiences that amaze. More information about HP Inc. is available at http://www.hp.com.